forked from kamba4/sunders
| Filename | Latest commit message | Latest commit date |
|---|---|---|
Stefan Bethke
100762ea2e
camera.php built its JSON by hand with htmlentities(), which leaves backslashes intact, and the client parsed it with eval() and inserted tag values into the popup as HTML. A tag value such as <img ...> therefore became live markup (stored XSS for anyone able to edit OSM data), and a lone backslash broke parsing of the whole response. - camera.php now builds the response with json_encode() and returns raw values - tags named lat, lon, id, count, multi or poly no longer override the fields set by the server - error responses no longer include database error messages - the client uses JSON.parse() and escapes all keys and values; only http(s) URLs are rendered as links/images |
||
| .. | ||
| www/sunders | ||
| Containerfile | ||